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Abstract 

We find a resonance behavior in the disturbance when an eavesdropper chooses a near-optimal 
strategy intentionally or unintentionally when the usual Bennett-Brassard cryptographic scheme is 
performed between two trusted parties. This phenomenon tends to disappear when eavesdropping 
strategy moves far from the optimal one. Therefore, we conjecture that this resonant effect is a 
characteristic for the eavesdropping strategy near to optimal one. We argue that this effect makes 
the quantum cryptography more secure against the eavesdropper's attack. 
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Recently, there are a lot of activities in the various applications of the quantum informa- 
tion theories[l]. Among them the most important ones are application to quantum computer 
and quantum cryptography. While the physical realization of the quantum computer seems 
to be far from the embodiment in a few years, developing quantum cryptography based on 
the BB84 [21 and Ekert91[3| protocols is at the stage of the industrial era[4]. 

The main issue of the quantum cryptography is to determine how secure the quantum 
cryptographic scheme compared to the classical scheme. This issue can be turned into the 
following question: how much information the eavesdropper (Eve) can gain when a secret 
key is established between two trusted parties(Alice and Bob)? 

Of course, the answer of the question is dependent on the eavesdropping strategies. The 

n n 

authors in Ref.[5|, [6[ computed the optimal mutual information between Alice and Eve in 
the usual BB84 protocol and the final results are 
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where <p(z) = (1 + z) log 2 (l + z) + (l — z) log 2 (l — z) and the subscripts denote the conjugate 
basis Alice and Bob use during BB84 process. The disturbance D is Bob's observable error 
rate. 

Subsequently, the BB84 protocol has been extended to the case that Alice and Bob use the 
three conjugate bases [71]. It has been shown that this extended scheme is more secure against 
the optimal eavesdropping. In order to find more secure quantum cryptographic protocols, 
recently, much attention is paid to the qutrit 8, 9], qudit 9, 1(3, 11] and continuous- variable 
systems^ . The optima, eavesdropping on noisy states is also ftdly drscnssed very recently 
in Ref.[13(. 

Instead of the optimal eavesdropping strategy we would like to discuss, in this letter, 
on the near-optimal eavesdropping in usual BB84 scenario. We will show that an inter- 
esting quantum resonance occurs in the disturbance between Alice and Bob when Eve's 
eavesdropping strategy is near to optimal. 

First, we consider a simple case that Eve uses one-qubit probe. Eve makes contact her 
probe with the qubit between Alice and Bob and gets her probe to be entangled. We restrict 
ourselves into the case when Alice chooses x — y basis with notation \x) = |0) and \y) = |1). 
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We choose the entangled states as following 



\x) -> \X) = o|00) +6|11) 

\y) ->\Y)=6 (— 6|00> + a|ll>) + VT^~¥ (c|10) + d|01» 



(2) 



with a 2 + b 2 = c 2 + d 2 = 1. 

According to BB84 scenario, Alice will announce bases which she used to establish a 
secret key through public channel. After the announcement Eve performs an appropriate 
quantum-mechanical measurement on her probe to gain information on the Alice's qubit. In 
order to maximize the information gain one can show that Eve takes a POVM measurement 
with complete set of positive operators {E = \Eq)(E \, E\ = \Ei)(E 1 \}, whereQ 



\E ) = — e(ac — 6c/)a/1 + cos<^|0) H — — cos<^|l) 

V 2 v2 



(3) 



\Ei) = —=\Jl — cosy?|0) H — -=e(ac — bd)^l + costal), 
v 2 v 2 

In Eq.([3]) e(x) = x/\x\ is usual alternating function and 
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with a = (a 2 - c 2 ) - 5 2 (b 2 - c 2 ) and (3 = dVT^iac - bd). Then, following Ref. it is 
straightforward to compute the Eve's average information gain G: 



G = q G + qiG l 



(5) 



where 



qo — — + —(1 — 5 2 ){a 2 — b 2 + c 2 — d 2 ) cos ip — — S 2 \ac — bd\ simp 
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qx = - - ^(1 - 5 2 ){a 2 -b 2 + c 2 - d 2 ) cos^ + ^5y/l - 5 2 |ac - 6d| siny? 
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{(a 2 - b 2 - c 2 + rf 2 ) + 5 2 (a 2 - 6 2 + c 2 - rf 2 )} cos^ + 25Vl^6 2 \ac - bd\ simp 



{(a 2 - b 2 - c 2 + d 2 ) + 5 2 (a 2 -b 2 + c 2 - d 2 )} cosy? + 25Vl^6 2 \ac - bd\ simp 



Using Eq.([n]) one can compute the mutual information between Alice and Eve, which is 

Iae = ~ [g o 0(G o ) + 



(7) 



where <f)(z) — (1 + z) log 2 (l + z) + (1 — z) log 2 (l — z). 



Now, let us discuss on the Bob's error rate Db, which is usually called disturbance. 
Firstly, let us consider d Xu (or d\ v ), which is the probability that Bob gets a wrong result 
conditioned upon Alice sending \u) (or \v)) and Eve measuring A, where \u) = (\x) + \y))/\/2 
and \v) = (\x) — \y))/y2. Then, it is easy to show 

(U\(\u)(u\)®E x \U) (V\(\v)(v\)®E x \V) 
Xu ~ (U\1®E X \U) (V\1®E X \V) [) 

where \U) = QX) + \Y))/y/2 and \V) = (\X) - \Y))/y/2. If Eve has chosen the optimal 
strategy ab initio, d Xu and d Xv should coincide with each other. Since, however, we are 
considering the non-optimal case, we cannot expect d Xu = d Xv in general. Although it is 
straightforward to compute d Xu and d Xv , we will not present the explicit expressions in this 
letter due to their lengthy expressions. As expected, d Xu is different from d Xv except 5 = 
case. 




Fig. 1 



FIG. 1: The plot of D-dependence of the mutual information between Alice and Eve when 5 = 
and a = 0.01. Because of the fact that d x is dependent on A, the mutual information for the 5 = 
case is slightly smaller than that for the optimal case. 



We would like to discuss the 5 = case briefly. In this case the most optimal conditions 
derived in Ref. 5j are satisfied. The only one this case does not satisfy is the fact that 
d x = d Xu = d Xv is dependent on A. This fact makes the mutual information Iae{.& = 0) 
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to be slightly smaller than the optimal value Eq.flT]) as shown in Fig. 1. In Fig. 1 the 
disturbance D is defined as an average Bob's error rate 

D = ^q x d x = -(1-ac-bd). (9) 

A 

Since the 5 = case does satisfy the almost optimal conditions, we guess that the mutual 
information Xae for this case is maximum on condition that Eve uses the single-qubit probe. 

Now let us consider the 5^0 case. Since, in this case, d Xu is different from d\ v , we should 
define the disturbance as 

D = p u D u + p v D v (10) 
where p^s are the prior probabilities that Alice sends signal i, and 

D u = ^2qxd X u D v = ^2q x d Xv . (11) 

A A 

In this letter we take a reasonable assumption that the two signals are equiprobable, i.e. 
Pu = Pv = 1/2. 
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Fig. 2 



FIG. 2: The c-dependence of D when 5 = 0.05 and a = 0.5. Fig. 2 implies that there exists a 
resonance-like phenomenon in the Bob's error rate when Eve chooses the near-optimal eavesdrop- 
ping strategy. The two peaks in the figure are originated from D u and D v respectively. 

Fig. 2 is a c-dependence of D when 5 = 0.05 and a = 0.5. Fig. 2 shows that there exist 
two sharp peaks, which looks like a resonance phenomenon. The left and right peaks are 
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originated from D v and D u respectively. The reason why the peaks appear in the disturbance 
can be explained as follows. Under some circumstances the numerator (U\(\u)(u\®E\) \U) 
is slightly smaller than the denominator ®E\\U) in d\ u in the wide range of parameter 
space. Thus, d\ u becomes very small in this region. If however, there are some points where 
the numerator {U\(\u) {u\®E\) \U) approaches zero, this makes a sharp increase at these 
points even if the denominator (U\t <g> E\\U) is slightly larger than the numerator. Similar 
phenomenon can occurs for d\ v , which gives different peak. 

Numerical calculation shows that these sharp peaks disappear when 8 increases. This fact 
makes us to conjecture that this resonance-like phenomenon happens in the near-optimal 
strategy because the 8 = case can play a role as an optimal strategy on condition that 
Eve uses a single-qubit probe. 

In order to check the validity of our conjecture let us consider the case that Eve chooses 
the near-optimal strategy with her two-qubit probe. We assume that entanglement between 
Alice's and Eve's qubits is given by 



\X) = V~s\x)\£ x ) + VT^~s\y)\( x ) 

\Y) = V~s\y) \VT=P\£ y ) + 8 (- ^|fi) + y/p\9-) 



+VT^~s\x) vT^|c w ) + *(-vT^|$+) + v^|^>) 



(12) 



where 
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\Cy) = V^|*i> + V^Pl^y) 



The states and |^^.) denote the maximally entangled Bell basis as follows: 
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The reason why we choose Eq. (fT2l is that the entangled states IX) and \Y) with 5 
provides an optimal mutual information to Eve as shown in Ref.p). Thus, we want to find 
a resonance phenomenon when 5 is small to check the validity of our guess. 

The disturbance D can be computed numerically by making use of the symbolic calcu- 
lation. Fig. 3 is a plot of a-dependence of D when /3 = 1.8 — a, s = 0.5 and 5 = 0.05. 
As expected the disturbance D exhibits a resonance behavior with varying a. This phe- 
nomenon tends to disappear with increasing 5. Thus, this resonant behavior seems to be a 



0.50 
D 

0.25 



0.80 0.85 0.90 0.95 1.00 

a 

Fig. 3 

FIG. 3: The a-dependence of the disturbance D when Eve uses the entanglement Eq, (|12p . The 
other constants are fixed by (5 = 1.8 — a, s = 0.5 and 5 = 0.05. As expected the disturbance 
D exhibits a sharp resonance. This effect disappears with increasing 5, which means that Eve's 
eavesdropping strategy is far from optimal one. Thus, this resonance seems to occur in the near- 
optimal strategy. 

characteristic for the near-optimal eavesdropping strategy. Unlike Fig. 2, Fig. 3 shows one 
peak. This is due to the fact that D u and D v have peaks at the same point. 

In this letter we report on the resonance phenomenon in the disturbance when Eve chooses 
the near-optimal eavesdropping strategy. In reality eavesdropper cannot perform the exact 
optimal strategy due to the various nature's non-linear and/or decoherence effects. If eaves- 
dropper takes an near-optimal strategy, this resonance effect increases a possibility for the 
two trusted parties to realize the eavesdropping attack. As a result, the resonance discussed 
in this letter makes the quantum cryptography more and more secure. It is of highly im- 
portant, in this reason, to verify this resonance phenomenon in the quantum cryptographic 
experiment. 
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